CVE-2026-111552 · Vendor
NO FIX YET · SEE WHAT TO DO
Hyper E-Commerce Infrastructure, its dealer integration, and its storefront and management panel rely on single-factor authentication that can be bypassed. An attacker can get past the login and act as an authenticated user.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Any online store or dealer setup running the Hyper E-Commerce Infrastructure, its dealer integration, or its storefront and management panel below the fixed versions is exposed. The sources do not describe the exact login path or configuration needed, so teams should confirm whether their deployment uses these components.
Not affected if patched-version
Who cares e-commerce, hyper-e-commerce, self-hosted
1.1 or later1.2 or later2.1796 or laterUse of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows Authentication Bypass.
This issue affects Hyper E-Commerce Infrastructure: before 1.1; Hyper E-Commerce Infrastructure - dealer integration: before 1.2; Hyper E-Commerce Infrastructure - Storefront application and management panel: before 2.1796.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.